Actions io lib
72%
Total Score
caution
Usable with caveats: every workflow action reference is unpinned, weakening CI supply-chain hygiene.
Only 3 commits were recorded in the last 3 months, indicating modest recent maintenance activity. Two active maintainers and organization backing provide some continuity, so this is a caution rather than a severe abandonment signal.
The repository had 5 new issues and 7 new pull requests in the last month but closed or merged none, suggesting some backlog or slow throughput. This is a moderate maintenance concern, not evidence of abandonment by itself.
All 33 workflow action references are unpinned, which weakens reproducibility and CI supply-chain hygiene. The audit found no untrusted checkouts or script-injection sinks; the high-confidence template-injection findings remain hygiene concerns without those corroborating conditions.
We didn't find any vulnerabilities for this package.
No direct dependencies.
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.

I consent to receiving marketing communications based on Aikido’s Privacy Policy.
SOC 2Compliant
ISO 27001Compliant
ISO 42001Compliant© All Intel data is openly available and commercially licensed.